Unified Write Filter WMI provider reference

To help protect physical storage media, you can use the WMI providers for Unified Write Filter (UWF) to configure UWF.

This section describes the WMI provider classes for UWF.

In this section

  • UWF_ExcludedFile: A container class that contains the files and folders that are currently in the file exclusion list for a volume protected by UWF.
  • UWF_ExcludedRegistryKey: A container class that contains the registry keys that are currently in the registry key exclusion list for UWF.
  • UWF_Filter: Enables or disables Unified Write Filter (UWF), resets configuration settings for UWF, and shuts down or restarts your device.
  • UWF_Overlay: Contains the current size of the UWF overlay and manages the critical and warning thresholds for the overlay size.
  • UWF_OverlayConfig: Manages the configuration of the UWF overlay.
  • UWF_OverlayFile: Displays and configures global settings for the UWF overlay. You can modify the maximum size and the type of the UWF overlay.
  • UWF_RegistryFilter: Adds or removes registry exclusions from UWF filtering.
  • UWF_Servicing: Contains properties and methods that enable you to query and control UWF servicing mode.
  • UWF_Volume: Manages a volume protected by UWF.


We recommend setting the authentication level to PacketIntegrity or PacketPrivacy for remote clients when you connect to WMI providers under root\standardcimv2\embedded when using WMI scripts or applications. For more information about how to use authentication with WMI providers, see this WMI Enhancements in Windows PowerShell 2.0 CTP on TechNet.


Windows 10 Enterprise, Windows 10 Education, or Windows 10 IoT Core Enterprise